WhatsApp usernames are already raising impersonation red flags

WhatsApp has begun reserving usernames globally, allowing users to communicate via handles instead of phone numbers. However, in India—its largest market—handles like “indiamodi,” “shahrukh.actor,” and “rbi_verify” remain unclaimed, raising alarms about bad actors impersonating public figures and organizations. Meta claims it blocks variations of high-profile names proactively but has not clarified its criteria for doing so. India’s Ministry of Electronics and Information Technology (MeitY) has warned WhatsApp that the feature could amplify fraud and impersonation risks, demanding regulatory consultations before full deployment. Meanwhile, Meta’s FAQ emphasizes privacy benefits, such as reducing SIM-swap vulnerabilities, while allowing users to reuse Instagram or Facebook usernames to bolster brand consistency.

The debate underscores a tension between privacy and security in messaging platforms. While usernames shield phone numbers—critical in combating SIM-based attacks—they also enable impersonation by decoupling identity from verifiable phone numbers. This mirrors a 2023 Delhi High Court critique of Telegram’s username system, which flagged risks of anonymous abuse. In India, where WhatsApp is a primary communication tool, the government’s pushback highlights regulatory challenges in balancing innovation with accountability. Meta’s approach reflects its broader strategy to unify identity across its platforms, leveraging cross-app username linking to strengthen creator and business profiles, though this also entrenches its walled garden against competitors.

India’s MeitY may escalate legal pressure if WhatsApp fails to address fraud risks, potentially triggering stricter content liability rules under the IT Act. Meanwhile, Meta must navigate conflicting priorities: satisfying privacy advocates who praise reduced phone-number exposure while addressing security experts’ warnings about impersonation. Users should monitor WhatsApp’s final safeguards, such as verification processes for high-risk handles, while regulators in other markets may adopt similar scrutiny. The interoperability question also lingers: Meta’s control over cross-platform identity could hinder rivals’ efforts to integrate with its ecosystem.